Privacy Policy

Who is responsible for your data

Dar al-Hikma is operated by Mouhammad Ouwaiss MOOLLAN, established in Türkiye. Your contract for any course is with them. They are responsible for the personal data described in this policy.

For any privacy question: support@daralhikma.institute.

Information we collect

• Account data: your email and password (stored as an irreversible hash, so we never see it) and, optionally, a display name.
• Enrolment data: the texts and courses you enrol in, your study progress, and the attendance your teacher records after each majlis.
• Payment data: payment is by direct bank transfer. We keep your name, email, the country you are paying from, your reference code, the amount, and what you enrolled in. We never see or store card details - the transfer happens between your bank and ours. If you transfer to us, your name appears on our bank statement.
• Scholarship requests: if you ask for a half or full scholarship we keep that choice and anything you optionally write about yourself. We ask for no proof, and we use what you write only to decide your request.
• Technical data: basic logs, a single essential cookie that keeps you signed in, and aggregate measurements of page performance and visits that set no tracking cookies.

How we use your data

• To give you access to lessons and materials.
• To authenticate you when you sign in.
• To send essential messages: password resets and sign-in links, receipts, and schedule changes.
• To improve the service and meet legal obligations.

Cookies

We use a single essential cookie to keep your session active after you sign in. We use no advertising or tracking cookies and build no profile of you. Our visit and performance measurement is cookieless and aggregate, which is why you see no consent banner.

Who we share data with

We use service providers that process data only on our behalf, and we never sell your data:

• Supabase - database, authentication, and file storage.
• Vercel - website hosting, and aggregate, cookieless measurement of page performance and visits.
• Resend - delivery of essential email (password setup and sign-in links).
• Cloudflare - our domain, and forwarding of support email to us.
• Our recording host (YouTube in privacy-enhanced mode, Vimeo, or Bunny Stream) - when you play a recording, your browser contacts that host directly.
• Our bank - sees your name and transfer reference when you pay.

International transfers

Our providers may process data in countries outside your own. We apply appropriate safeguards to protect your data wherever it is processed.

Data retention

We keep your data while your account is active, then delete or anonymise it on request or after a period of inactivity.

Your rights

You may access, correct, delete, port, and object to the processing of your data. To exercise any of these rights, contact us at support@daralhikma.institute.

Children

Our service is intended for adults and is not directed at children under 16.

Updates & contact

We may update this policy; the last-updated date appears at the top. For any privacy question, contact us at support@daralhikma.institute.